Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          EpWH46yuVnblc7H9HnXD58QK2ir5sbNiBPdoe0CA3Fg=
Subject key identifier:   14:6F:7A:3D:7F:2D:3C:7B:C9:CF:C3:49:4A:B5:02:6B:AE:3E:88:0F
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       0196A3C1221C4E689E929B608A4277BB2FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          0DB8
Signing time:             Tue 06 May 2025 04:01:05 +0000
Manifest this update:     Tue 06 May 2025 04:01:05 +0000
Manifest next update:     Wed 07 May 2025 04:01:05 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: xUmT1thPEMbI33QFJyvC++GzI17aVw38q7eOrxY8pF4=)
                          2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c1:22:1c:4e:68:9e:92:9b:60:8a:42:77:bb:2f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: May  6 04:01:05 2025 GMT
            Not After : May  7 04:01:05 2025 GMT
        Subject: CN=146f7a3d7f2d3c7bc9cfc3494ab5026bae3e880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:58:8d:53:50:55:74:89:3c:ec:c9:da:ea:
                    e1:8c:43:bd:ae:75:93:93:ab:c6:8f:ba:9c:62:36:
                    cf:02:b6:a3:71:b3:94:02:ce:08:fa:26:01:ed:d3:
                    15:fe:d0:70:4d:7d:0c:46:8c:44:5f:07:9c:36:58:
                    90:0d:73:42:45:70:9c:a2:55:4c:b5:c8:18:b5:3e:
                    dd:a7:e5:0a:b3:93:f8:b1:9a:16:e2:19:1f:c9:df:
                    21:66:d6:f9:64:e8:58:4e:d1:27:59:15:6a:9f:e3:
                    94:6f:de:0e:2d:53:8a:77:8a:bf:cc:c6:7b:58:15:
                    39:2a:e0:75:9b:50:d8:ed:b7:8b:8b:67:c0:2a:fa:
                    63:e9:0d:b4:c1:79:2c:4f:7c:8d:0f:f7:3b:36:61:
                    7a:ee:f9:40:b0:12:a8:fb:2b:c7:a1:8e:99:38:98:
                    70:19:05:f6:40:49:1a:ae:66:b8:d9:36:6f:38:d1:
                    6a:15:a1:74:ea:d6:27:d2:a3:f6:ec:74:6a:1c:17:
                    2a:ac:34:a2:0e:bd:2a:72:a3:fd:b9:f8:2c:d1:e2:
                    21:e9:ee:7e:ff:91:c1:68:72:1c:6d:78:a4:d0:29:
                    08:d8:a4:20:b1:d7:23:15:98:0e:ed:a4:2b:fa:06:
                    4a:8e:ea:12:62:30:94:05:95:b8:35:2a:3c:85:bd:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6F:7A:3D:7F:2D:3C:7B:C9:CF:C3:49:4A:B5:02:6B:AE:3E:88:0F
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:82:90:e5:9e:5f:d6:16:be:cd:ed:b8:48:ba:11:c1:76:
         12:bc:e5:a7:ef:c8:14:6b:cb:be:c3:34:f9:1e:69:c2:3a:a2:
         06:f2:96:92:ef:e9:3c:f3:fb:01:d8:7a:27:00:7c:9e:e5:7b:
         5a:8c:ba:29:4a:6d:e3:20:3a:a2:82:50:46:68:aa:96:1c:5b:
         cb:1c:e2:4a:ed:f8:44:48:7c:77:4e:0c:9e:0f:ae:e1:47:ad:
         21:a7:07:83:ff:c7:af:87:d0:8f:e2:ed:d1:0a:16:fb:e2:84:
         18:f2:0d:86:4d:a5:e9:94:8e:c6:77:f2:ae:11:32:1f:c3:76:
         83:17:c7:ad:6a:37:28:01:24:ef:65:b7:98:91:c4:ca:73:cf:
         5f:c2:43:92:f6:a4:5d:e2:20:c2:15:4e:9a:f7:ad:b3:1b:be:
         46:c5:fb:9f:74:6f:0b:ad:c8:45:40:40:26:df:8a:8f:f9:4d:
         86:46:63:4a:b0:ac:8c:44:a9:f7:56:fe:03:1b:ca:bb:2d:bf:
         29:86:7c:a9:3d:8c:43:b9:bb:ed:9b:59:4c:45:a2:8a:eb:d8:
         95:4d:ec:6c:fa:bc:76:e5:3a:43:a6:01:40:3a:fa:d7:44:21:
         5b:55:1a:52:fd:04:e1:fd:f5:17:f2:22:14:e1:eb:02:ca:34:
         e7:8b:e1:e6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZajwSIcTmiekptgikJ3uy/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2
ZTkxZDcwHhcNMjUwNTA2MDQwMTA1WhcNMjUwNTA3MDQwMTA1WjAzMTEwLwYDVQQD
EygxNDZmN2EzZDdmMmQzYzdiYzljZmMzNDk0YWI1MDI2YmFlM2U4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzApYjVNQVXSJPOzJ2urhjEO9rnWT
k6vGj7qcYjbPArajcbOUAs4I+iYB7dMV/tBwTX0MRoxEXwecNliQDXNCRXCcolVM
tcgYtT7dp+UKs5P4sZoW4hkfyd8hZtb5ZOhYTtEnWRVqn+OUb94OLVOKd4q/zMZ7
WBU5KuB1m1DY7beLi2fAKvpj6Q20wXksT3yND/c7NmF67vlAsBKo+yvHoY6ZOJhw
GQX2QEkarma42TZvONFqFaF06tYn0qP27HRqHBcqrDSiDr0qcqP9ufgs0eIh6e5+
/5HBaHIcbXik0CkI2KQgsdcjFZgO7aQr+gZKjuoSYjCUBZW4NSo8hb1SmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBRvej1/LTx7yc/DSUq1AmuuPogPMB8GA1UdIwQY
MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5
LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5
N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1qC
kOWeX9YWvs3tuEi6EcF2Erzlp+/IFGvLvsM0+R5pwjqiBvKWku/pPPP7Adh6JwB8
nuV7Woy6KUpt4yA6ooJQRmiqlhxbyxziSu34REh8d04Mng+u4UetIacHg//Hr4fQ
j+Lt0QoW++KEGPINhk2l6ZSOxnfyrhEyH8N2gxfHrWo3KAEk72W3mJHEynPPX8JD
kvakXeIgwhVOmvetsxu+RsX7n3RvC63IRUBAJt+Kj/lNhkZjSrCsjESp91b+AxvK
uy2/KYZ8qT2MQ7m77ZtZTEWiiuvYlU3sbPq8duU6Q6YBQDr610QhW1UaUv0E4f31
F/IiFOHrAso054vh5g==
-----END CERTIFICATE-----
Generated at Tue May 6 05:55:19 2025 by rpki-client